Force HTTP to HTTPS

[rcshield]

How do I force a Web page to display in HTTPS? I am not using Apache - I am using Microsoft IIS 5.0.

[caribguy]

I don't know if you can have IIS include a piece of code like this snippet of Pythonscript. This is executed during every request.

request = context.REQUEST
if request.URL.find('manage.example.com') == -1: # skip all if management hostname
..if request.URL.find('example.com/shop') != -1: # skip rest if not browsing the shop
....if request.URL[0:5] != 'https':
......request.setServerURL('https', 'secure.example.com', '443') 
......return request.RESPONSE.redirect(context.absolute_url(), status=301, lock=1)
..else: # not in shop
....if request.URL[0:5] != 'http:': 
......request.setServerURL('http', 'www.example.com', '80') 
......return request.RESPONSE.redirect(context.absolute_url(), status=301, lock=1)

[bill]

How To Set Up an HTTPS Service in IIS [support.microsoft.com]

How to enable SSL for all customers who interact with your Web site in Internet Information Services [support.microsoft.com]